<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Watching me watching you</title>
	<atom:link href="http://www.p2pnet.net/story/13155/feed" rel="self" type="application/rss+xml" />
	<link>http://www.p2pnet.net/story/13155</link>
	<description>p2pnet.net - reader powered</description>
	<lastBuildDate>Wed, 01 Feb 2012 15:11:09 -0300</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.4</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: Reader's Write</title>
		<link>http://www.p2pnet.net/story/13155/comment-page-1#comment-169978</link>
		<dc:creator>Reader's Write</dc:creator>
		<pubDate>Thu, 30 Aug 2007 18:04:26 +0000</pubDate>
		<guid isPermaLink="false">http://www.p2pnet.net/story/13155#comment-169978</guid>
		<description>But, wouldn&#039;t the use of these encryption programs automatically cause the government to start scrutinizing you closely, whereas they may have previously ignored you as benign?  After all, it is the philosophy of the government that you have no reason to hide anything unless you have &quot;something&quot; to hide.

I would think the use of these programs and methods would only serve to call additional, unwanted attention to yourself.</description>
		<content:encoded><![CDATA[<p>But, wouldn&#8217;t the use of these encryption programs automatically cause the government to start scrutinizing you closely, whereas they may have previously ignored you as benign?  After all, it is the philosophy of the government that you have no reason to hide anything unless you have &#8220;something&#8221; to hide.</p>
<p>I would think the use of these programs and methods would only serve to call additional, unwanted attention to yourself.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Anon</title>
		<link>http://www.p2pnet.net/story/13155/comment-page-1#comment-169205</link>
		<dc:creator>Anon</dc:creator>
		<pubDate>Tue, 28 Aug 2007 17:08:37 +0000</pubDate>
		<guid isPermaLink="false">http://www.p2pnet.net/story/13155#comment-169205</guid>
		<description>Concerned individuals/groups should consider encrypting Email, Instant Messaging, and VOIP (Internet telephony), and employing anonymity technologies.

For more information; 

http://www.panta-rhei.eu.org/news/newsportal-0.36/article.php?id=94218&amp;group=alt.privacy#94218
http://www.panta-rhei.eu.org/pantawiki/SecurityAndEncryptionFaq
http://en.wikipedia.org/wiki/Pretty_Good_Privacy
http://en.wikipedia.org/wiki/GNU_Privacy_Guard
http://en.wikipedia.org/wiki/Off-the-Record_Messaging
http://en.wikipedia.org/wiki/Hushmail
http://en.wikipedia.org/wiki/Zfone</description>
		<content:encoded><![CDATA[<p>Concerned individuals/groups should consider encrypting Email, Instant Messaging, and VOIP (Internet telephony), and employing anonymity technologies.</p>
<p>For more information; </p>
<p><a href="http://www.panta-rhei.eu.org/news/newsportal-0.36/article.php?id=94218&amp;group=alt.privacy#94218" rel="nofollow">http://www.panta-rhei.eu.org/news/newsportal-0.36/article.php?id=94218&amp;group=alt.privacy#94218</a><br />
<a href="http://www.panta-rhei.eu.org/pantawiki/SecurityAndEncryptionFaq" rel="nofollow">http://www.panta-rhei.eu.org/pantawiki/SecurityAndEncryptionFaq</a><br />
<a href="http://en.wikipedia.org/wiki/Pretty_Good_Privacy" rel="nofollow">http://en.wikipedia.org/wiki/Pretty_Good_Privacy</a><br />
<a href="http://en.wikipedia.org/wiki/GNU_Privacy_Guard" rel="nofollow">http://en.wikipedia.org/wiki/GNU_Privacy_Guard</a><br />
<a href="http://en.wikipedia.org/wiki/Off-the-Record_Messaging" rel="nofollow">http://en.wikipedia.org/wiki/Off-the-Record_Messaging</a><br />
<a href="http://en.wikipedia.org/wiki/Hushmail" rel="nofollow">http://en.wikipedia.org/wiki/Hushmail</a><br />
<a href="http://en.wikipedia.org/wiki/Zfone" rel="nofollow">http://en.wikipedia.org/wiki/Zfone</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Anon</title>
		<link>http://www.p2pnet.net/story/13155/comment-page-1#comment-169204</link>
		<dc:creator>Anon</dc:creator>
		<pubDate>Tue, 28 Aug 2007 17:01:28 +0000</pubDate>
		<guid isPermaLink="false">http://www.p2pnet.net/story/13155#comment-169204</guid>
		<description>DriveCrypt Plus Pack and &quot;plausible deniability&quot;?

I believe it may also be possible to use DriveCrypt Plus Pack to achieve &quot;plausible deniability&quot;

DCPP is supposed to enable the user to hide an entire operating system inside the free disk space of another operating system. Two passwords are required: One password is for the visible operating system, the other for the invisible one. The first &quot;fake&quot; password grants access to a pre-configured operating system (outer OS), while the other gives grants access to the real working operating system. This functionality is extremely useful if the user fears that someone may force them to provide the DCPP password; in this case, the user simply gives away the first (fake) password so that the snoop will be able to boot into the  system, but only see the prepared information that they wishes them to find. The attacker will not be able to see any confidential and personal data and he will also not be able to understand that the machine is storing one more hidden operating system. On the other hand, if the user enters the private password (for the invisible disk), the system will boot a different operating system (the working system) giving the user the access to all the confidential data.

The creation of a hidden operating system is not obligatory and as such, it is not possible for anyone who does not have the hidden OS password to know or find out, if a hidden operating system exists or not.

--</description>
		<content:encoded><![CDATA[<p>DriveCrypt Plus Pack and &#8220;plausible deniability&#8221;?</p>
<p>I believe it may also be possible to use DriveCrypt Plus Pack to achieve &#8220;plausible deniability&#8221;</p>
<p>DCPP is supposed to enable the user to hide an entire operating system inside the free disk space of another operating system. Two passwords are required: One password is for the visible operating system, the other for the invisible one. The first &#8220;fake&#8221; password grants access to a pre-configured operating system (outer OS), while the other gives grants access to the real working operating system. This functionality is extremely useful if the user fears that someone may force them to provide the DCPP password; in this case, the user simply gives away the first (fake) password so that the snoop will be able to boot into the  system, but only see the prepared information that they wishes them to find. The attacker will not be able to see any confidential and personal data and he will also not be able to understand that the machine is storing one more hidden operating system. On the other hand, if the user enters the private password (for the invisible disk), the system will boot a different operating system (the working system) giving the user the access to all the confidential data.</p>
<p>The creation of a hidden operating system is not obligatory and as such, it is not possible for anyone who does not have the hidden OS password to know or find out, if a hidden operating system exists or not.</p>
<p>&#8211;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Anon</title>
		<link>http://www.p2pnet.net/story/13155/comment-page-1#comment-169202</link>
		<dc:creator>Anon</dc:creator>
		<pubDate>Tue, 28 Aug 2007 17:00:31 +0000</pubDate>
		<guid isPermaLink="false">http://www.p2pnet.net/story/13155#comment-169202</guid>
		<description>Off-the-Record Messaging, commonly referred to as OTR, is a cryptographic protocol that provides strong encryption for instant messaging conversations. OTR provides perfect forward secrecy and deniable encryption. 

1. Perfect forward secrecy: Messages are only encrypted with temporary per-message AES keys, negotiated using the Diffie-Hellman key exchange protocol. The compromise of any long-lived cryptographic keys does not compromise any previous conversations, even if an attacker is in possession of ciphertexts.

2. Deniable authentication: Messages in a conversation do not have digital signatures, and after a conversation is complete, anyone is able to forge a message to appear to have come from one of the participants in the conversation, assuring that it is impossible to prove that a specific message came from a specific person.</description>
		<content:encoded><![CDATA[<p>Off-the-Record Messaging, commonly referred to as OTR, is a cryptographic protocol that provides strong encryption for instant messaging conversations. OTR provides perfect forward secrecy and deniable encryption. </p>
<p>1. Perfect forward secrecy: Messages are only encrypted with temporary per-message AES keys, negotiated using the Diffie-Hellman key exchange protocol. The compromise of any long-lived cryptographic keys does not compromise any previous conversations, even if an attacker is in possession of ciphertexts.</p>
<p>2. Deniable authentication: Messages in a conversation do not have digital signatures, and after a conversation is complete, anyone is able to forge a message to appear to have come from one of the participants in the conversation, assuring that it is impossible to prove that a specific message came from a specific person.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Anon</title>
		<link>http://www.p2pnet.net/story/13155/comment-page-1#comment-169201</link>
		<dc:creator>Anon</dc:creator>
		<pubDate>Tue, 28 Aug 2007 16:59:20 +0000</pubDate>
		<guid isPermaLink="false">http://www.p2pnet.net/story/13155#comment-169201</guid>
		<description>TrueCrypt&#039;s &quot;aleatory&quot; defence against RIPA

TrueCrypt provides an &quot;aleatory&quot; defence against RIPA, and, indeed, against any similar legislation. This defence works because TrueCrypt makes encrypted material indistinguishable from pseudo-random data. And before the authorities can insist that you hand over an encryption key, they would first be obliged to prove to the satisfaction of a court that you were in possession of encrypted material. Depending on how TrueCrypt is set up it might be obvious that you have some pseudo-random data in an atypical location on your computer, and you might well be asked how it got there. Now, there are many computer processes that produce pseudo-random data, and you are not obliged by the legislation to account for the origins of every file on your computer that contains such data given the tens of thousands of files on the average PC this would be an impossible task. However, TrueCrypt can also provide you with an excellent and highly plausible reason as to why you possess such a file of pseudo-random data irrespective of where it is found.</description>
		<content:encoded><![CDATA[<p>TrueCrypt&#8217;s &#8220;aleatory&#8221; defence against RIPA</p>
<p>TrueCrypt provides an &#8220;aleatory&#8221; defence against RIPA, and, indeed, against any similar legislation. This defence works because TrueCrypt makes encrypted material indistinguishable from pseudo-random data. And before the authorities can insist that you hand over an encryption key, they would first be obliged to prove to the satisfaction of a court that you were in possession of encrypted material. Depending on how TrueCrypt is set up it might be obvious that you have some pseudo-random data in an atypical location on your computer, and you might well be asked how it got there. Now, there are many computer processes that produce pseudo-random data, and you are not obliged by the legislation to account for the origins of every file on your computer that contains such data given the tens of thousands of files on the average PC this would be an impossible task. However, TrueCrypt can also provide you with an excellent and highly plausible reason as to why you possess such a file of pseudo-random data irrespective of where it is found.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Anon</title>
		<link>http://www.p2pnet.net/story/13155/comment-page-1#comment-169200</link>
		<dc:creator>Anon</dc:creator>
		<pubDate>Tue, 28 Aug 2007 16:58:50 +0000</pubDate>
		<guid isPermaLink="false">http://www.p2pnet.net/story/13155#comment-169200</guid>
		<description>FreeOTFE can be found at http://www.freeotfe.org/
Off-the-Record (OTR) can be found at http://www.cypherpunks.ca/otr/
TrueCrypt can be found at http://www.truecrypt.org/</description>
		<content:encoded><![CDATA[<p>FreeOTFE can be found at <a href="http://www.freeotfe.org/" rel="nofollow">http://www.freeotfe.org/</a><br />
Off-the-Record (OTR) can be found at <a href="http://www.cypherpunks.ca/otr/" rel="nofollow">http://www.cypherpunks.ca/otr/</a><br />
TrueCrypt can be found at <a href="http://www.truecrypt.org/" rel="nofollow">http://www.truecrypt.org/</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Anon</title>
		<link>http://www.p2pnet.net/story/13155/comment-page-1#comment-169198</link>
		<dc:creator>Anon</dc:creator>
		<pubDate>Tue, 28 Aug 2007 16:56:18 +0000</pubDate>
		<guid isPermaLink="false">http://www.p2pnet.net/story/13155#comment-169198</guid>
		<description>TrueCrypt thrawts RIPA III

The UK government is going to deprive honest an law-abiding citizens of their liberties while criminals can carry on theirs businesses as usual, with just a little software upgrade.

Free software like TrueCrypt can conceal encrypted material in a way that prevent its detection.

In case the Police forces you to reveal your password, TrueCrypt provides and supports two kinds of &quot;plausible deniability&quot;:

1. Hidden volumes. The principle is that a TrueCrypt volume is created within another TrueCrypt volume (within the free space on the volume). Even when the outer volume is mounted, it is impossible to prove whether there is a hidden volume within it or not, because free space on any TrueCrypt volume is always filled with random data when the volume is created* and no part of the (dismounted) hidden volume can be distinguished from random data. Note that TrueCrypt does not modify the file system (information about free space, etc.) within the outer volume in any way.

2. It is impossible to identify a TrueCrypt volume. Until decrypted, a TrueCrypt volume appears to consist of nothing more than random data (it does not contain any kind of &quot;signature&quot;). Therefore, it is impossible to prove that a file, a partition or a device is a TrueCrypt volume or that it has been encrypted.

FreeOTFE  also offers similar features. 

Off-the-Record (OTR)  Messaging, offers true deniability for instant messaging.</description>
		<content:encoded><![CDATA[<p>TrueCrypt thrawts RIPA III</p>
<p>The UK government is going to deprive honest an law-abiding citizens of their liberties while criminals can carry on theirs businesses as usual, with just a little software upgrade.</p>
<p>Free software like TrueCrypt can conceal encrypted material in a way that prevent its detection.</p>
<p>In case the Police forces you to reveal your password, TrueCrypt provides and supports two kinds of &#8220;plausible deniability&#8221;:</p>
<p>1. Hidden volumes. The principle is that a TrueCrypt volume is created within another TrueCrypt volume (within the free space on the volume). Even when the outer volume is mounted, it is impossible to prove whether there is a hidden volume within it or not, because free space on any TrueCrypt volume is always filled with random data when the volume is created* and no part of the (dismounted) hidden volume can be distinguished from random data. Note that TrueCrypt does not modify the file system (information about free space, etc.) within the outer volume in any way.</p>
<p>2. It is impossible to identify a TrueCrypt volume. Until decrypted, a TrueCrypt volume appears to consist of nothing more than random data (it does not contain any kind of &#8220;signature&#8221;). Therefore, it is impossible to prove that a file, a partition or a device is a TrueCrypt volume or that it has been encrypted.</p>
<p>FreeOTFE  also offers similar features. </p>
<p>Off-the-Record (OTR)  Messaging, offers true deniability for instant messaging.</p>
]]></content:encoded>
	</item>
</channel>
</rss>


